What is claimed is: 

1. A method of recovery in an asynchronous remote copy system having a 
primary file system at a primary site and a secondary file system at a secondary site, said 
method comprising: 

in response to the primary site becoming inoperative during read/write access to 
the primary file system and asynchronous remote copy of changes made to the primary 
file system being copied to the secondary file system, beginning read/write access to the 
secondary file system, making a snapshot copy of the secondary file system at the 
beginning of read/write access to the secondary file system, and keeping a record of 
changes made to the secondary file system during the read/write access to the secondary 
file system; and thereafter, 

when the primary site becomes operative, using the snapshot copy to restore the 
primary file system to the state of the secondary file system existing when read/write 
access of the secondary file system was begun, and then writing into the primary file 
system the changes made to the secondary file system during the read/write access to the 
secondary file system; and 

terminating read/write access to the secondary file system, and once the changes 
made to the secondary file system have been written into the primary file system, 
restarting read/write access to the primary file system and asynchronous remote copy of 
changes made to the primary file system being copied to the secondary file system. 
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2. The method as claimed in claim 1, wherein the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system 
includes using the Internet Protocol to transmit the changes made to the primary file 
system over a data network between the primary site and the secondary site. 

3. The method as claimed in claim 2, which includes, in response to the 
primary site becoming operative, transmitting over a first IP pipe changes having been 
made to the secondary file system during the read/write access to the secondary file 
system prior to the primary site becoming operative, and concurrently transmitting over a 
second IP pipe changes having been made to the secondary file system during read/write 
access to the secondary file system after the primary site becomes operative. 

4. The method as claimed in claim 1, wherein the state of the secondary file 
system existing when read/write access of the secondary file system was begun is a prior 
state of the primary file system existing before the primary site became inoperative, and 
the method includes the primary site keeping a list of blocks that have been changed in 
the primary file system during read/write access to the primary file system, and the 
snapshot copy is used to restore the primary file system to the state of the secondary file 
system existing when read/write access of the secondary file system was begun by 
accessing the list of blocks that have been changed in the primary file system during the 
read/write access to the primary file system to determine the blocks that have been 
changed in the primary file system since said prior state of the primary file system, and 
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copying from the snapshot copy to the primary file system the blocks that have been 
changed in the primary file system since said prior state of the primary file system. 

5. A method of recovery in an asynchronous remote copy system having a 
primary file system at a primary site and a secondary file system at a secondary site, said 
method comprising: 

in response to the primary site becoming inoperative during the asynchronous 
remote copy of changes made to the primary file system being copied to the secondary 
file system, beginning read/write access to the secondary file system, and then: 

in response to the primary site becoming operative, synchronizing the primary file 
system to the secondary file system by beginning asynchronous remote copy of changes 
made to the secondary file system being copied to the primary file system, making a 
snapshot copy of the secondary file system at the beginning of the asynchronous remote 
copy of changes made to the secondary file system being copied to the primary file 
system, synchronizing the primary file system to the snapshot copy of the secondary file 
system, and once the primary file system has been synchronized to the snapshot copy of 
the secondary file system, terminating read/write access to the secondary file system and 
completing the asynchronous remote copy of changes made to the secondary file system 
being copied to the primary file system; and 

once the asynchronous remote copy of changes made to the secondary file system 
has been completed, restarting the read/write access to the primary file system and 
asynchronous remote copy of changes made to the primary file system being copied to 
the secondary file system. 
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6. The method as claimed in claim 5, wherein the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system 
includes using the Internet Protocol to transmit the changes made to the primary file 
system over a data network between the primary site and the secondary site. 

7. The method as claimed in claim 5, wherein the asynchronous remote copy 
of changes made to the secondary file system being copied to the primary file system 
includes transmitting changes made to the secondary file system over a first IP pipe from 
the secondary site to the primary site, and the synchronizing of the primary file system to 
the snapshot copy of the secondary file system includes transmitting changes made to the 
secondary file system over a second IP pipe from the secondary site to the primary site, 
and wherein the transmission of the changes made to the secondary file system over the 
first IP pipe is concurrent with the transmission of the changes made to the secondary file 
system over the second IP pipe. 

8. A method of recovery in an asynchronous remote copy system having a 
primary file system at a primary site and a secondary file system at a secondary site, said 
method comprising: 

in response to the primary site becoming inoperative during read/write access to 
the primary file system and asynchronous remote copy of changes made to the primary 
file system being copied to the secondary file system, beginning read/write access to the 
secondary file system, making a first snapshot copy of the secondary file system at the 
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beginning of read/write access to the secondary file system, and keeping a record of 
changes made to the secondary file system during the read/write access to the secondary 
file system; and thereafter, 

when the primary site becomes operative, making a second snapshot copy of the 
secondary file system, beginning asynchronous remote copy of changes made to the 
secondary file system since the second snapshot copy being copied to the primary file 
system, using the first snapshot copy to restore the primary file system to the state of the 
secondary file system existing when read/write access of the secondary file system was 
begun, and then writing into the primary file system the changes made to the secondary 
file system during the read/write access to the secondary file system between the time of 
the first snapshot copy and the second snapshot copy; and 

terminating read/write access to the secondary file system, and once the changes 
made to the secondary file system have been written into the primary file system, 
restarting the read/write access to the primary file system and asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system. 

9. The method as claimed in claim 8, wherein the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system 
includes using the Internet Protocol to transmit the changes made to the primary file 
system over a data network between the primary site and the secondary site. 

10. The method as claimed in claim 8, wherein the asynchronous remote copy 
of changes made to the secondary file system since the second snapshot copy being 
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copied to the primary file system includes transmitting changes made to the secondary 
file system over a first IP pipe from the secondary site to the primary site, and which 
further includes transmitting changes made to the secondary file system between the first 
snapshot copy and the second snapshot copy over a second IP pipe from the secondary 
site to the primary site, and wherein the transmission of the changes made to the 
secondary file system over the first IP pipe is concurrent with the transmission of the 
changes made to the secondary file system over the second IP pipe. 

11. In an asynchronous remote copy system in which changes made to data 
blocks of a primary file system at a primary site are transmitted to a secondary file system 
at a secondary site, the primary site storing a list of the data bocks that have been changed 
in the primary file system, a method of recovery from a disruption at the primary site, 
said method comprising: 

accessing the list of the data blocks that have been changed in the primary file 
system to restore the primary file system to a prior state at a restart point, the prior state at 
the restart point including changes made to the primary file system that have been 
transmitted to the secondary site, the primary file system being restored by determining 
from the list the data blocks that have been changed in the primary file system since the 
restart point, and obtaining from the secondary site the data existing at the time of the 
restart point in the data blocks that have been changed in the primary file system since the 
restart point, and writing into the primary file system the data existing at the time of the 
restart point in the data blocks that have been changed in the primary file system since the 
restart point. 
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12. The method as claimed in claim 11, which includes the secondary site 
responding to the disruption by making a snapshot copy of the secondary file system at 
the restart point once all of the changes to the primary file system that have been 
transmitted to the secondary file system have been written into the secondary file system, 
and wherein the data existing at the time of the restart point in the data blocks that have 
been changed in the primary file system since the restart point are 'obtained from the 
snapshot copy at secondary site. 

13. The method as claimed in claim 11, which further includes the secondary 
site activating the secondary file system for read/write access once all of the changes to 
the primary file system that have been transmitted to the secondary file system prior to 
the disruption have been written into the secondary file system. 

14. The method as claimed in claim 11, which further includes the secondary 
site responding to the disruption by activating the secondary file system for read/write 
access, and wherein the state of the primary file system at the restart point is the state of 
the secondary file system when the secondary file system is activated for read/write 
access. 

15. The method as claimed in claim 14, which includes the secondary site 
keeping a record of changes made to the secondary file system since the restart point, and 
once the primary site is operative and after writing into the primary file system the data 
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existing at the time of the restart point in the data blocks that have been changed in the 
primary file system since the restart point, writing the changes made to the secondary file 
system since the restart point into the primary file system. 

16. The method as claimed in claim 14, which includes the secondary site 
keeping a record of changes made to the secondary file system since the restart point, and 
once the primary site is operative, beginning at an intermediate point replication of 
changes made to the secondary file system, and after writing into the primary file system 
the data existing at the time of the restart point in the data blocks that have been changed 
in the primary file system since the restart point, copying changes made to the secondary 
file system since the restart point and up to the intermediate point into the primary file 
system. 

17. The method as claimed in claim 16, which includes beginning playback of 
the replicated changes made to the secondary file system into the primary file system 
once the changes made to the secondary file system since the restart point and up to the 
intermediate point have been copied to the primary file system. 

18. The method as claimed in claim 17, which includes ending read/write 
access to the secondary file system thereby terminating the replication of changes made 
to the secondary file system, and once all of the changes made to the secondary file 
system have been played back into the primary file system, the primary site restarts the 
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transmission of changes made to data blocks of the primary file system to the secondary 
file system. 

19. An asynchronous remote copy system comprising a primary data storage 
system and a secondary data storage system, the primary data storage system having a 
primary file system and the secondary data storage system having a secondary file 
system, the primary data storage system being programmed for read/write access to the 
primary file system and asynchronous remote copy of changes made to the primary file 
system being copied to the secondary file system, 

wherein the secondary data storage system is programmed to respond to the 
primary data storage system becoming inoperative during the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system by 
beginning read/write access to the secondary file system, making a snapshot copy of the 
secondary file system at the beginning of read/write access to the secondary file system, 
and keeping a record of changes made to the secondary file system during the read/write 
access to the secondary file system; and 

wherein the primary data storage system and the secondary data storage system 
are programmed for recovery when the primary data storage system becomes operative 
by using the snapshot copy to restore the primary file system to the state of the secondary 
file system existing when read/write access of the secondary file system was begun, and 
then writing into the primary file system the changes made to the secondary file system 
during the read/write access to the secondary file system, terminating read/write access to 
the secondary file system, and once the changes made to the secondary file system have 
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been written into the primary file system, restarting read/write access to the primary file 
system and asynchronous remote copy of changes made to the primary file system being 
copied to the secondary file system. 

20. The asynchronous remote copy system as claimed in claim 19, wherein the 
primary data storage system is programmed to perform the asynchronous remote copy of 
changes made to the primary file system being copied to the secondary file system by 
using the Internet Protocol to transmit the changes made to the primary file system over a 
data network between the primary data storage system and the secondary data storage 
system. 

21. The asynchronous remote copy system as claimed in claim 20, wherein the 
secondary data storage system is programmed to respond to the primary data storage 
system becoming operative by transmitting over a first IP pipe changes having been made 
to the secondary file system during the read/write access to the secondary file system 
prior to the primary data storage system becoming operative, and concurrently 
transmitting over a second IP pipe changes having been made to the secondary file 
system during read/write access to the secondary file system after the primary data 
storage system becomes operative. 

22. The asynchronous remote copy system as claimed in claim 19, wherein the 
state of the secondary file system existing when read/write access of the secondary file 
system was begun is a prior state of the primary file system existing before the primary 
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data storage system became inoperative, and wherein the primary data storage system is 
programmed to keep a list of blocks that have been changed in the primary file system 
during the read/write access to the primary file system, and to restore the primary file 
system to the state of the secondary file system existing when read/write access of the 
secondary file system was begun by accessing the list of blocks that have been changed 
in the primary file system during the read/write access to the primary file system to 
determine the blocks that have been changed in the primary file system since said prior 
state of the primary file system, and copying from the snapshot copy to the primary file 
system the blocks that have been changed in the primary file system since said prior state 
of the primary file system. 

23. An asynchronous remote copy system comprising a primary data storage 
system and a secondary data storage system, the primary data storage system having a 
primary file system and the secondary data storage system having a secondary file 
system, the primary data storage system being programmed for read/write access to the 
primary file system and asynchronous remote copy of changes made to the primary file 
system being copied to the secondary file system, 

wherein the secondary data storage system is programmed to respond to the 
primary data storage system becoming inoperative during the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system by 
the secondary data storage system beginning read/write access to the secondary file 
system, and 
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wherein the primary data storage system and the secondary data storage system 
are programmed to respond to the primary data storage system becoming operative by 
synchronizing the primary file system to the secondary file system by beginning 
asynchronous remote copy of changes made to the secondary file system being copied to 
the primary file system, making a snapshot copy of the secondary file system at the 
beginning of the asynchronous remote copy of changes made to the secondary file system 
being copied to the primary file system, synchronizing the primary file system to the 
snapshot copy of the secondary file system, and once the primary file system has been 
synchronized to the snapshot copy of the secondary file system, terminating read/write 
access to the secondary file system and completing the asynchronous remote copy of 
changes made to the secondary file system being copied to the primary file system; and 
once the asynchronous remote copy of changes made to the secondary file system has 
been completed, restarting read/write access to the primary file system and asynchronous 
remote copy of changes made to the primary file system being copied to the secondary 
file system. 

24. The asynchronous remote copy system as claimed in claim 23, wherein the 
primary data storage system is programmed to perform the asynchronous remote copy of 
changes made to the primary file system being copied to the secondary file system by 
using the Internet Protocol to transmit the changes made to the primary file system over a 
data network between the primary data storage system and the secondary data storage 
system. 
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25. The asynchronous remote copy system as claimed in claim 23, wherein the 
secondary data storage system is programmed to perform the asynchronous remote copy 
of changes made to the secondary file system being copied to the primary file system by 
transmitting changes made to the secondary file system over a first IP pipe from the 
secondary data storage system to the primary data storage system, and the secondary data 
storage system is programmed to synchronize the primary file system to the snapshot 
copy of the secondary file system by transmitting changes made to the secondary file 
system over a second IP pipe from the secondary data storage system to the primary data 
storage system, wherein the transmission of the changes made to the secondary file 
system over the first IP pipe is concurrent with the transmission of the changes made to 
the secondary file system over the second IP pipe. 

26. An asynchronous remote copy system comprising a primary data storage 
system and a secondary data storage system, the primary data storage system having a 
primary file system and the secondary data storage system having a secondary file 
system, the primary data storage system being programmed for read/write access to the 
primary file system and asynchronous remote copy of changes made to the primary file 
system being copied to the secondary file system, 

wherein the secondary data storage system is programmed to respond to the 
primary data storage system becoming inoperative during the asynchronous remote copy 
of changes made to the primary file system being copied to the secondary file system by 
beginning read/write access to the secondary file system, making a first snapshot copy of 
the secondary file system at the beginning of read/write access to the secondary file 
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system, and keeping a record of changes made to the secondary file system during the 
read/write access to the secondary file system; 

wherein the secondary data storage system is programmed to respond to the 
primary data storage system becoming operative by making a second snapshot copy of 
the secondary file system, and beginning asynchronous remote copy of changes made to 
the secondary file system since the second snapshot copy being copied to the primary file 
system; and 

wherein the primary data storage system and the secondary data storage system 
are programmed for using the first snapshot copy to restore the primary file system to the 
state of the secondary file system existing when read/write access of the secondary file 
system was begun, and then writing into the primary file system the changes made to the 
secondary file system during the read/write access to the secondary file system between 
the time of the first snapshot copy and the second snapshot copy, and terminating 
read/write access to the secondary file system, and once the changes made to the 
secondary file system have been written into the primary file system, restarting read/write 
access to the primary file system and asynchronous remote copy of changes made to the 
primary file system being copied to the secondary file system. 

27. The asynchronous remote copy system as claimed in claim 26, wherein the 
primary data storage system is programmed to perform the asynchronous remote copy of 
changes made to the primary file system being copied to the secondary file system by 
using the Internet Protocol to transmit the changes made to the primary file system over a 
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data network between the primary data storage system and the secondary data storage 
system. 

28. The asynchronous remote copy system as claimed in claim 26, wherein the 
secondary data storage system is programmed to perform the asynchronous remote copy 
of changes made to the secondary file system since the second snapshot copy being 
copied to the primary file system by transmitting changes made to the secondary file 
system since the second snapshot copy over a first IP pipe from the secondary data 
storage system to the primary data storage system, and the secondary data storage system 
is programmed to transmit the changes made to the secondary file system during the 
read/write access to the secondary file system between the time of the first snapshot copy 
and the second snapshot copy over a second IP pipe from the secondary data storage 
system to the primary data storage system, wherein the transmission of the changes made 
to the secondary file system over the first IP pipe is concurrent with the transmission of 
the changes made to the secondary file system over the second IP pipe. 

29. An asynchronous remote copy system comprising a primary data storage 
system and a secondary data storage system, the primary data storage system having a 
primary file system and the secondary data storage system having a secondary file 
system, the primary data storage system being programmed for read/write access to the 
primary file system and asynchronous remote copy of changes made to the primary file 
system being copied to the secondary file system, the primary data storage system storing 
a list of the data bocks that have been changed in the primary file system; 
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wherein the primary data storage system and the secondary data storage system 
are programmed for recovering from a disruption in the asynchronous remote copy of 
changes made to the primary file system being copied to the secondary file system by 
accessing the list of the data blocks that have been changed in the primary file system to 
restore the primary file system to a prior state at a restart point, the prior state at the 
restart point including changes made to the primary file system that have been 
transmitted to the secondary data storage system, the primary file system being restored 
by determining from the list the data blocks that have been changed in the primary file 
system since the restart point, and obtaining from the secondary data storage system the 
data existing at the time of the restart point in the data blocks that have been changed in 
the primary file system since the restart point, and writing into the primary file system the 
data existing at the time of the restart point in the data blocks that have been changed in 
the primary file system since the restart point. 

30. The asynchronous remote copy system as claimed in claim 29, wherein the 
secondary data storage system is programmed to respond to the disruption by making a 
snapshot copy of the secondary file system at the restart point once all of the changes to 
the primary file system that have been transmitted to the secondary file system have been 
written into the secondary file system, and wherein the secondary file system is 
programmed to obtain from the snapshot copy the data existing at the time of the restart 
point in the data blocks that have been changed in the primary file system since the restart 
point. 
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31. The asynchronous remote copy system as claimed in claim 29, wherein the 
secondary data storage system is programmed to activate the secondary file system for 
read/write access once all of the changes to the primary file system that have been 
transmitted to the secondary file system prior to the disruption have been written into the 
secondary file system. 

32. The asynchronous remote copy system as claimed in claim 29, wherein the 
secondary data storage system is programmed to respond to the disruption by activating 
the secondary file system for read/write access, and the state of the primary file system at 
the restart point is the state of the secondary file system when the secondary file system is 
activated for read/write access. 

33. The asynchronous remote copy system as claimed in claim 32, wherein the 
secondary data storage system is programmed for keeping a record of changes made to 
the secondary file system since the restart point, and wherein the primary data storage 
system is programmed for writing into the primary file system the data existing at the 
time of the restart point in the data blocks that have been changed in the primary file 
system since the restart point and then writing the changes made to the secondary file 
system since the restart point into the primary file system. 

34. The asynchronous remote copy system as claimed in claim 32, wherein the 
secondary data storage system is programmed for keeping a record of changes made to 
the secondary file system since the restart point, and for responding to the primary data 
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storage system becoming operative after the disruption by beginning at an intermediate 
point replication of changes made to the secondary file system, and copying to the 
primary data storage system changes made to the secondary file system since the restart 
point and up to the intermediate point. 

35. The asynchronous remote copy system as claimed in claim 34, wherein the 
primary data storage system is programmed to write into the primary file system the 
changes made to the secondary file system since the restart point and up to the 
intermediate point, and then begin playback of the replicated changes made to the 
secondary file system into the primary file system. 

36. The asynchronous remote copy system as claimed in claim 35, wherein the 
primary data storage system is programmed to restart read/write access to the primary file 
system and asynchronous remote copy of changes made to the primary file system being 
copied to the secondary data storage system once all of the changes made to the 
secondary file system have been played back into the primary file system. 
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